I've just started using Sophos, and basic functionality works.
Unfortunately I'm having issues enabling outside access to our PPTP / SSTP server. UTM doesn't have SSTP at all, and the PPTP requires the use of local users (we already have everything set up via AD on our VPN server).
My first instinct was to try and use DNAT, but it seems this isn't working. The initial packet seems to go through fine, but the connection cannot be established, in the end.
The VPN server has an internal DNS "srv-vpn-p01" with IP 10.150.1.11. I've tried creating the following DNAT rules:
Any->PPTP->public IP
Destination translation: srv-vpn-p01
The above is for the PPTP. I've also tried the same for SSTP (setting it up as a simple service using port 443).
Turning on logging for those DNAT rules, I get the following in the Firewall logs:
15:22:34 NAT rule #1 TCP 62.21.53.132 : 52483 → 91.227.197.59 : 1723 [SYN] len=52 ttl=122 tos=0x00 srcmac=4c:5e:0c:c8:e0:07 dstmac=00:1a:8c:44:af:5d
Where NAT rule #1 is the auto-generated firewall rule based off the DNAT rule.
What am I missing?
This thread was automatically locked due to age.
